Vulnerabilities

TI-2025-10008 CVE-2025-10930 · GHSA-27fv-rpgj-4c6m

Currency - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-110

LOW 34

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Currency allows Cross Site Request Forgery.This issue affects Currency: from 0.0.0 before 3.5.0.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00133 Published 2025-10-29 Fixed in 3.5.0 CWE-352

TI-2010-01033 CVE-2010-1074 · GHSA-893c-j9f3-gj2f

Cross-site scripting (XSS) vulnerability in the Currency Exchange module before 6.x-1.2…

LOW 23

Cross-site scripting (XSS) vulnerability in the Currency Exchange module before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to watchdog logging.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01309 Published 2010-03-23 No fix listed CWE-79

TI-2009-03592 CVE-2009-3782 · GHSA-wf53-3973-wc7h

Unspecified vulnerability in Userpoints 6.x before 6.x-1.1, a module for Drupal, allows…

LOW 19

Unspecified vulnerability in Userpoints 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with "View own userpoints" permissions to read the userpoint data of arbitrary users via unknown attack v…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01074 Published 2009-10-26 No fix listed CWE-200

Vulnerabilities

Filters

Currency - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-110

Cross-site scripting (XSS) vulnerability in the Currency Exchange module before 6.x-1.2…

Unspecified vulnerability in Userpoints 6.x before 6.x-1.1, a module for Drupal, allows…